Class: Nanite::SecureSerializer

Inherits:
Object
  • Object
show all
Defined in:
lib/nanite/security/secure_serializer.rb

Overview

Serializer implementation which secures messages by using X.509 certificate sigining.

Class Method Summary collapse

Class Method Details

.dump(obj) ⇒ Object

Serialize message and sign it using X.509 certificate



31
32
33
34
35
36
37
38
39
40
41
42
43
 
# File 'lib/nanite/security/secure_serializer.rb', line 31

def self.dump(obj)
  raise "Missing certificate identity" unless @identity
  raise "Missing certificate" unless @cert
  raise "Missing certificate key" unless @key
  raise "Missing certificate store" unless @store || !@encrypt
  json = obj.to_json
  if @encrypt
    certs = @store.get_recipients(obj)
    json = EncryptedDocument.new(json, certs).encrypted_data if certs
  end
  sig = Signature.new(json, @cert, @key)
  { 'id' => @identity, 'data' => json, 'signature' => sig.data, 'encrypted' => !certs.nil? }.to_json
end

.init(identity, cert, key, store, encrypt = true) ⇒ Object

Initialize serializer, must be called prior to using it.

- 'identity':   Identity associated with serialized messages
- 'cert':       Certificate used to sign and decrypt serialized messages
- 'key':        Private key corresponding to 'cert'
- 'store':      Certificate store. Exposes certificates used for
                encryption and signature validation.
- 'encrypt':    Whether data should be signed and encrypted ('true')
                or just signed ('false'), 'true' by default.



17
18
19
20
21
22
23
 
# File 'lib/nanite/security/secure_serializer.rb', line 17

def self.init(identity, cert, key, store, encrypt = true)
  @identity = identity
  @cert = cert
  @key = key
  @store = store
  @encrypt = encrypt
end

.initialized? ⇒ Boolean

Was serializer initialized?

Returns:

  • (Boolean) 


26
27
28
 
# File 'lib/nanite/security/secure_serializer.rb', line 26

def self.initialized?
  @identity && @cert && @key && @store
end

.load(json) ⇒ Object

Unserialize data using certificate store



46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
 
# File 'lib/nanite/security/secure_serializer.rb', line 46

def self.load(json)
  begin
    raise "Missing certificate store" unless @store
    raise "Missing certificate" unless @cert || !@encrypt
    raise "Missing certificate key" unless @key || !@encrypt
    data = JSON.load(json)
    sig = Signature.from_data(data['signature'])
    certs = @store.get_signer(data['id'])
    raise "Could not find a cert for signer #{data['id']}" unless certs
    certs = [ certs ] unless certs.respond_to?(:each)
    jsn = data['data'] if certs.any? { |c| sig.match?(c) }
    if jsn && @encrypt && data['encrypted']
      jsn = EncryptedDocument.from_data(jsn).decrypted_data(@key, @cert)
    end
    JSON.load(jsn) if jsn
  rescue Exception => e
    Nanite::Log.error("Loading of secure packet failed: #{e.message}\n#{e.backtrace.join("\n")}")
    raise
  end
end